CVE-2026-96374

The Project Browser module for Drupal is vulnerable to a Cross-Site Request Forgery (CSRF) issue. The module fails to sufficiently validate administrative actions, which could allow an attacker to perform unauthorized actions such as applying recipes or enabling modules via the web user interface...